chore(release): 0.1.19 - #27
Conversation
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
An organization admin can view or raise the cap at claude.ai/admin-settings/claude-code. The cap resets at the start of the next billing period.
Once the cap resets or is raised, reopen this pull request to trigger a review.
There was a problem hiding this comment.
Pull request overview
Release prep for screenscribe 0.1.19, incorporating the previously merged HTML Pro review/reset work and tightening endpoint/provider classification to rely on canonical DNS host boundaries (instead of substring matching), along with dependency lock updates.
Changes:
- Bump project version to 0.1.19 and promote Unreleased notes into the 0.1.19 changelog entry.
- Harden endpoint provider detection by parsing URL hostnames and rejecting lookalike domains; add tests covering canonical vs lookalike hosts.
- Refresh dev/security toolchain pins in
uv.lock(e.g., Semgrep/MCP/Cryptography).
Reviewed changes
Copilot reviewed 4 out of 5 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
uv.lock |
Updates locked dependency versions for the release/tooling refresh. |
tests/test_config_env.py |
Adds tests ensuring endpoint provider classification uses canonical host boundaries and rejects lookalikes. |
screenscribe/config.py |
Switches provider detection to parsed hostnames and uses it in validation logic. |
pyproject.toml |
Bumps package version to 0.1.19. |
CHANGELOG.md |
Adds the 0.1.19 section and moves documented changes into the release entry. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 9ebb0a4077
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Summary\n\n- release the PR #26 HTML Pro review/reset and responsive-shell fixes as 0.1.19\n- classify provider endpoints by canonical, IDNA-normalized DNS hostname boundaries instead of URL substrings\n- refresh the development-only Semgrep chain to patched mcp 1.29.0 and cryptography 50.0.0\n- promote the documented Unreleased changes into the 0.1.19 changelog\n\n## Security gate\n\n- Semgrep: 0 findings\n- Bandit: 0 issues\n- pip-audit over the complete runtime + dev lock export: no known vulnerabilities\n- focused configuration suite: 145 passed\n- HTTP client parity checked for U+3002, U+FF0E, and U+FF61 DNS separators\n\n## Release verification\n\n- make release-verify: PASS on 1246339\n- exact wheel and sdist version: 0.1.19\n- strict Twine metadata: PASS\n- 32 tracked runtime assets present in wheel, sdist, and clean wheel install\n- clean wheel + sdist installs, CLI help, and self-contained effect render: PASS\n\nThe production PyPI workflow will run only after the merged main commit is tagged and the GitHub Release is published.